CVE-1999-0080

Published Sep 29, 1999 CVSS 2.0 · 10.0 Critical EPSS 4.0% KEV · Not listed
Description
Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-0080 Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 4:27 PM
Reserved
Jun 7, 1999, 12:00 AM
Status
Modified
Published
Nov 30, 1995, 5:00 AM
Modified
Apr 16, 2026, 12:27 AM